Data Subject Access Request

In accordance with the General Data Protection Regulation 2018, people have a right to know what information Thirteen holds about them

You have a right to know the information that Thirteen holds about you. This includes:

  • what information we hold
  • what we use the information for
  • who we have disclosed that information to
  • who we may disclose that information to.

You can make a request for this information by completing a 'data subject access request'.

Once we receive your request we will contact you to verify your information. Thirteen then has 30 days to respond to your request and supply you with all the information that you have requested. In exceptional circumstances where requests are complex or numerous, we can extend this by a further two months, but we would let you know if this is the case. We will supply the information in the format requested, either electronically or on paper.

All information given to you will have other people's identifiable information removed. Occasionally we will refuse to give you the information requested where the other individuals could still be directly or indirectly identified.

If you don't agree with our decision, you have a right to complain to the Information Commissioner's Office. You can do this by contacting them at:

Submitting a request

To submit a data subject access request:

In what capacity are you making this application for information?

If you are under 18 years of age or an adult with mental health issues or a learning disability, you must complete the following four questions.

Please supply details of a parent, guardian or social worker who can certify that you understand the nature of the application. By completing these details, you are confirming that the applicant understands the nature of this application:

Please state why a nominated person needs to apply on your behalf

If you are an agent (eg Citizens Advice Bureau) making an application on behalf of the data subject, please answer the following two questions. By completing these details, you are confirming that the applicant authorises you to act on their behalf:

Data Subject Declaration

In exercising the right granted to me under the terms of the General Data Protection Regulation 2018, I request that you provide me with a copy of the personal data about me as requested and confirm that the information I have provided on this form is correct.

I understand that I am only entitled to receive personal data relating to myself and that I may not be entitled to receive data which reveals either directly or indirectly information relating to another person. I also understand that I may be asked for more information if required to ensure that my identity is confirmed.

I understand that my request will not be processed until Thirteen Governance and Compliance have received this form and that it may take up to 30 days before I receive the information. If this request has been made by an agent on my behalf, I also confirm that I give approval for all such information to be shared with them.

By submitting this form, you agree to the above declaration.